In short

Alufik collects only what it needs to work. There are no ads and no third-party analytics or tracking tools, and we never sell or share data with anyone. A parent creates and controls each child's profile and can delete all of the family's data at any time.

1. Who we are

Alufik is a gamified chores and habits app for children, developed by Dudu Ohana (a private individual). The service is free and is currently in early release.

The app has no ads and we have no plans to add any. If paid options are ever added, we will update this document and announce it in advance.

Contact: alufikapp@gmail.com

2. What we collect

From the parent:

• Registration: email address, first and last name, gender (so Hebrew text addresses you correctly) and date of birth (to confirm the parent is 18 or older).
• Password: managed by Google Firebase Authentication and never visible to us. If you sign in with Google, we store your Google account ID, email and name.
• Co-parent (optional): the link between two parents of the same household.
• Consent records: when you accepted the terms and privacy policy, and when you gave parental consent to create a child profile.

From the child (entered by the parent):

• Profile: first name, last name, date of birth (for a birthday gift and age-appropriate content), gender (for Hebrew grammar), a built-in avatar or an optional profile photo.
• Login code and PIN: the PIN is stored server-side only, and the parent can reset it at any time.
• In-app activity: tasks, stars, medals, rewards, journal, streaks, pets and cosmetic items, and game results.
• Photos (optional): a photo the child attaches as proof of a task, and photos of rewards. Proof photos are deleted automatically once the parent approves the task.

Content users write:

• Task and reward titles, rejection reasons, encouragement messages from parent to child, and messages sent through the "Contact" or "Report a problem" forms (a child can also send a report from their own profile).

Technical data:

• Push notification tokens: an Expo Push / Firebase Cloud Messaging token in the app, or a Web Push subscription in the browser, only if you allow notifications.
• Device ID: a random ID the app generates, plus a generic device label (e.g. "Android" or "Mobile · Chrome"), so the parent can approve each new device a child signs in from.
• Crash and error reports (Sentry): device type and model, OS and app version, and technical error details. We strip user identifiers from these reports.
• A Firebase installation ID, and on the web, a Google reCAPTCHA check (App Check) to block bots.
• Sign-in state and preferences are stored locally on the device, so you don't have to sign in every time.

3. What we do NOT collect

• No ads and no third-party analytics, tracking or advertising tools (such as Google Analytics, Facebook Pixel or TikTok Pixel).
• No access to location, microphone or contacts. The app does not request microphone permission.
• The camera and photo picker open only when you or your child choose to take or attach a photo. The app never scans your gallery.
• We do not sell, rent or share data with third parties for marketing.
• There is no free-text chat between children.

4. Why we use data

• To run the app: sign-in, tasks, approvals, stars, rewards, games and friends.
• To keep family members' devices in sync.
• To send notifications and emails you asked for (such as "your child finished a task" or a weekly summary for parents).
• For security: approving new devices, and protecting against PIN guessing and bots.
• To find and fix bugs, and to answer your messages.

We never use data for advertising, marketing profiles or sale.

5. Who can see what

• Within the family: parents (including a co-parent) see their children's data. Each child sees their own data.
• Friends: a child can add another child as a friend with a friend code, and the friendship exists only after the request is approved. Accepted friends see the first name, profile photo or avatar, stars, medals, streak and cosmetic items, and can play duel games together. Children cannot exchange free-text messages. A parent can review and remove friends at any time.
• Hall of Fame: visible to all app users, showing only a first name, a built-in avatar and medal counts. Last names and uploaded photos are never shown there.
• Support: to fix a problem you reported, the developer may access that household's data, and only for that purpose.
• Infrastructure providers (section 6) process data only to run the service for us.

6. Infrastructure providers

These providers process data on our behalf only (as processors) and follow their own terms and privacy policies:

• Google Firebase: database, sign-in, file storage, server functions, notifications (Cloud Messaging), web hosting and App Check / reCAPTCHA. Data is stored on Google servers in Europe and the US.
• Expo: push notifications to the app.
• Sentry: crash and technical error reports.
• SendGrid (Twilio): emails to parents (verification, reminders and a weekly summary).

7. Security

• All traffic is encrypted (HTTPS / TLS), and data is stored encrypted at Google.
• Server-side access rules make sure each family can access only its own data.
• Sensitive actions (account deletion, PINs, device approval, stars) run on the server with permission checks.
• Deleting an account requires signing in again.

8. Retention and deletion

• We keep data while the account is active. Proof photos are deleted automatically when the parent approves the task.
• In the app: Parent → "Profile" tab → scroll to the bottom → "Delete account permanently" → sign in again and confirm. This deletes the parent account, the household's children (a child who also has a co-parent stays with that co-parent), tasks, history, rewards, photos, notification tokens and friend links. Deletion is immediate and cannot be undone.
• Without the app: use https://mytask-app-7dce0.web.app/delete-account, or email alufikapp@gmail.com from the account's email address. We handle requests within 30 days.
• Backups: we keep an automatic daily database backup to recover from failures. Deleted data is also removed from backups as part of the normal backup rotation.
• Crash reports in Sentry are deleted automatically according to Sentry's retention period.

9. Your rights

• View and correct: most data is visible and editable in the app (parent profile and kids management).
• Delete: see section 8.
• Get a copy: request a copy of your data at alufikapp@gmail.com.
• Opt out of notifications: in the app settings or your device settings.

10. Children and parental consent

• Alufik is made for families. Only a parent aged 18 or older can register. Children do not register themselves and are never asked for an email address.
• The parent creates the child's profile, gives explicit consent to process the child's data, and can edit or delete it at any time.
• We follow the principles of COPPA, GDPR for children and the Israeli Privacy Protection Law: minimal collection, no advertising and no tracking.

11. Changes to this policy

If we change this policy, we will update the date at the top. We will announce material changes in the app before they take effect.

12. Contact

For questions, a copy or deletion of your data, or a privacy concern: alufikapp@gmail.com, or the "Contact" button in the app. We aim to reply within 72 business hours.